BOX integration with our Web application

We have an application that we have already integrated with BOX using Service account and we are calling few BOX APIs to fetch the folders/files or metadata.

What we need now is an authentication mechanism in our app so that if a user logs in to our app, the user should see only his folders/files in BOX and should not see any other user's information. Is this possible? If yes, please guide us through a documentation.

PS: Currently this is not achieved as we are using Service account and anyone can see any data that is tagged with Service account.